Manual:$wgEnableUnsafeXsltOption
From mediawiki.org
| API: $wgEnableUnsafeXsltOption | |
|---|---|
| Enable the deprecated xslt option in the Action API. |
|
| Introduced in version: | 1.45.0 (Gerrit change 1208368; git #d6715400) |
| Removed in version: | Still in use |
| Allowed values: | Unspecified |
| Default value: | false |
| Other settings: Alphabetical | By function | |
Details
Enable the deprecated xslt option in the Action API.
This is unsafe and allows users with the editinterface right to perform XSS.
See phab:T401995.
This variable was backported to 1.44.3, 1.43.6, 1.39.16.